14.11 Security Architecture

Defense-in-depth security model: JWT tokens, bcrypt password hashing, and strict CORS policies.